| CVE-2023-24651 | MOYENNE5.4 | Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter on the registration page. | 27/02/2023 |
| CVE-2023-24364 | ÉLEVÉE8.8 | Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter under the Admin Panel. | 27/02/2023 |
| CVE-2023-1041 | MOYENNE6.1 | A vulnerability, which was classified as problematic, was found in SourceCodester Simple Responsive Tourism Website 1.0. This affects an unknown part of the file /tourism/rate_review.php. The manipulation of the argument id with the input 1"><script>alert(1111)</script> leads to cross site scripting. It is possible to | 26/02/2023 |
| CVE-2023-1035 | ÉLEVÉE8.8 | A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. It has been classified as critical. Affected is an unknown function of the file update_user.php. The manipulation of the argument user_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose | 25/02/2023 |
| CVE-2023-0966 | ÉLEVÉE8.8 | A vulnerability classified as problematic was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=orders/view_order. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has bee | 22/02/2023 |
| CVE-2023-0917 | CRITIQUE9.8 | A vulnerability, which was classified as critical, was found in SourceCodester Simple Customer Relationship Management System 1.0. This affects an unknown part of the file /php-scrm/login.php. The manipulation of the argument Password leads to sql injection. It is possible to initiate the attack remotely. The exploit h | 19/02/2023 |
| CVE-2023-24647 | ÉLEVÉE7.5 | Food Ordering System v2.0 was discovered to contain a SQL injection vulnerability via the email parameter. | 13/02/2023 |
| CVE-2023-24646 | CRITIQUE9.8 | An arbitrary file upload vulnerability in the component /fos/admin/ajax.php of Food Ordering System v2.0 allows attackers to execute arbitrary code via a crafted PHP file. | 13/02/2023 |
| CVE-2023-0732 | MOYENNE6.1 | A vulnerability has been found in SourceCodester Online Eyewear Shop 1.0 and classified as problematic. Affected by this vulnerability is the function registration of the file oews/classes/Users.php of the component POST Request Handler. The manipulation of the argument firstname/middlename/lastname/email/contact leads | 07/02/2023 |
| CVE-2023-0686 | CRITIQUE9.8 | A vulnerability was found in SourceCodester Online Eyewear Shop 1.0. It has been classified as critical. This affects the function update_cart of the file /oews/classes/Master.php?f=update_cart of the component HTTP POST Request Handler. The manipulation of the argument cart_id leads to sql injection. It is possible to | 06/02/2023 |
| CVE-2023-24202 | CRITIQUE9.8 | Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php. | 06/02/2023 |
| CVE-2023-24201 | CRITIQUE9.8 | Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at get_ticket.php. | 06/02/2023 |
| CVE-2023-24200 | CRITIQUE9.8 | Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at save_ticket.php. | 06/02/2023 |
| CVE-2023-24199 | CRITIQUE9.8 | Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at delete_ticket.php. | 06/02/2023 |
| CVE-2023-24198 | CRITIQUE9.8 | Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at save_winner.php via the ticket_id and draw parameters. | 06/02/2023 |
| CVE-2023-24197 | MOYENNE6.1 | Online Food Ordering System v2 was discovered to contain a SQL injection vulnerability via the id parameter at view_order.php. | 06/02/2023 |
| CVE-2023-24195 | MOYENNE6.1 | Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in index.php. | 06/02/2023 |
| CVE-2023-24194 | MOYENNE6.1 | Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the page parameter in navbar.php. | 06/02/2023 |
| CVE-2023-24192 | MOYENNE6.1 | Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in login.php. | 06/02/2023 |
| CVE-2023-24191 | MOYENNE6.1 | Online Food Ordering System v2 was discovered to contain a cross-site scripting (XSS) vulnerability via the redirect parameter in signup.php. | 06/02/2023 |